reroute (https://reroute.bio) is a link-in-bio platform for creators. This policy explains what data we collect, how we use it, and the choices you have.
It covers three groups of people:
- Creators: you have a reroute account and publish one or more Pages.
- Respondents and subscribers: you submit a form, upload a file or voice response, or subscribe through a creatorâs Page. You do not need a reroute account.
- Visitors: you browse reroute or a creatorâs public Page.
1. The Data We Collect
| Category | Examples | Why we collect it |
|---|---|---|
| Account data | Name, email, profile photo, and sign-in details | Account creation, sign-in, account management, and support |
| Page and creator content | Page names, profile details, links, Blocks, design settings, uploaded images, files, and audio | Publishing and operating creator Pages |
| Responses and audience data | Form answers, uploaded files or voice responses, names, email addresses, phone numbers, and subscription status | Delivering responses to creators and managing their audience |
| Billing data | Billing contact details and payment information processed by Stripe | Subscriptions, invoicing, cancellation, and legally required records |
| Usage and device data | IP address, browser and device information, pages viewed, Block clicks, referrers, campaign tags, and logs | Security, rate limiting, debugging, Insights, and product analytics |
| Cookies and local storage | Session data, saved preferences, subscription state, and Block Lock unlock state | Keeping you signed in, remembering choices, and operating the Service |
We do not ask creators for sensitive information as part of account setup. Creators control the fields on their forms, however, and respondents choose what they submit. Do not submit sensitive information unless you understand that it will be shared with the creator and any additional terms shown on the form.
2. Public Pages, Responses & Subscriptions
Creator Pages are public. Information a creator publishes on a Page, including profile details, links, and uploaded media, can be viewed by anyone with access to the Page.
When you submit a form or subscribe through a creatorâs Page:
- Your response is stored by reroute and shared with the creator identified on that Page.
- The Page tells you which fields are required before you submit. Depending on the form, a response may include text, contact details, files, or a voice recording.
- If you provide an email address, reroute may create or update a Contact in that creatorâs audience. You are marked as subscribed only when you take an action that asks to receive updates, such as using the Subscribe button or an email-signup form.
- The creator can view and download the information you submit and is responsible for how they use it. A creatorâs own terms may also apply when they are linked beneath the form.
- Where a Page shows a subscription-management control, you can use it to unsubscribe. You can also contact the creator directly, or email us about a response or subscription and we will help where we can.
3. How We Use Your Data
- Provide the Service: publish Pages, store creator content, deliver responses, manage audience Contacts, generate Insights, and keep accounts signed in.
- Process payments: manage paid plans through Stripe. We do not receive your full payment card number.
- Communicate with you: send sign-in codes, account notices, response notifications, service updates, and support replies.
- Improve and secure the Service: debug errors, understand product usage, enforce rate limits, and prevent fraud and abuse.
- Meet legal obligations: maintain required records and comply with applicable laws, including the Australian Privacy Act 1988 (Cth) where it applies.
4. Service Providers
We do not sell or rent your personal data. We share data with providers that help us run the Service:
| Provider | What it does | Data involved |
|---|---|---|
| Stripe | Payment processing and subscription billing | Billing details, email, and subscription records |
| Supabase | Database, authentication, and sign-in | Account data, Page data, responses, and audience data |
| Vercel and Vercel Blob | Hosting and file storage | Creator content, uploaded files, and usage/device data |
| Resend | Transactional email | Email address and notification content |
| PostHog, Rybbit & Ahrefs | Product and website analytics | Usage events and device data |
| Sentry | Error monitoring | Device data and diagnostic logs |
| Upstash | Rate limiting | IP address and request data |
| Optional Google sign-in and Google Wallet | Account profile data or digital-card details, when used | |
| Apple | Optional Apple Wallet passes | Digital-card details, when used |
| OpenFreeMap & Photon | Map tiles and location search | Map locations and request/device data, when maps are used |
These providers process data under their own terms and privacy policies and, where they act as our processors, on our instructions.
5. Legal Bases (EU/UK Visitors)
Where EU or UK data protection law applies, we rely on:
- Contractual necessity: to provide the Service you request.
- Legitimate interests: to operate, improve, and secure reroute, provided those interests are not overridden by your rights.
- Consent: where you choose to subscribe, use optional features, or consent is otherwise required. You may withdraw consent at any time.
- Legal obligation: to satisfy accounting, regulatory, or other legal requirements.
6. Data Retention
- Account and Page data: retained while your account remains open or until you remove the relevant content.
- Responses and audience data: retained while the creatorâs relevant Page or account remains active, unless we action a valid request sooner.
- Uploaded files: retained with the related account or response. Account deletion removes files from active reroute storage, subject to limited provider backups and logs.
- Usage, security, and diagnostic data: retained only as long as reasonably needed for analytics, security, debugging, and legal obligations.
- Financial records: retained for the period required by tax, accounting, and consumer laws.
Deleting your account cancels any active reroute subscription and permanently removes your account, Pages, responses, Contacts, and stored files from our active systems. Some billing records, security logs, and backup copies may remain where required by law or for a limited technical retention period.
7. Your Rights & Choices
| Region | Your rights may include |
|---|---|
| Australia | Access, correction, and complaint rights under the Privacy Act 1988 |
| EU/UK | Access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority |
You can update or delete your creator account from account settings and use any subscription-management control shown on a creatorâs Page. For access, correction, deletion, unsubscribe help, or other privacy requests, email hello@reroute.bio. We may need to verify your identity before completing a request, and some rights are subject to legal exceptions.
8. Childrenâs Privacy
The Service is not directed to children under 13. Creators must not knowingly use reroute to collect personal data from children under 13. If you believe a child has provided personal data, contact us so we can investigate and delete it where appropriate.
9. Cookies & Tracking Choices
We use cookies, local storage, and similar technologies to keep accounts signed in, remember preferences, record Block Lock unlock state, remember subscriptions on a device, and gather usage statistics. Most browsers let you refuse or delete these technologies, although disabling them may limit functionality.
10. International Data Transfers
reroute is operated from Australia, and our providers may process data in Australia, the United States, and other countries where they operate. Those countries may have different data protection laws. Where required, we use contractual or other safeguards for international transfers.
11. Security
We use technical and organisational safeguards including encryption in transit, access controls, rate limiting, and security monitoring. No online service is completely secure, so use a strong, unique sign-in method and take care with the information you publish or submit.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced by email to creators where appropriate and posted on this page with a new âLast updatedâ date.
13. Contact
Questions, privacy requests, or complaints? Email hello@reroute.bio.